[eli]

Fair question, but I'd imagine it's not worth spending time migrating users to a different system if the attacker can simply update the servers they're targeting to follow you there.